Silvio Ranise

ORCID

Publication Activity (10 Years)

Years Active: 1998-2024
Publications (10 Years): 99

Top Venues

Publications

Marco Pernpruner, Roberto Carbone, Giada Sciarretta, Silvio Ranise
An Automated Multi-Layered Methodology to Assist the Secure and Risk-Aware Design of Multi-Factor Authentication Protocols. IEEE Trans. Dependable Secur. Comput. 21 (4) (2024)
Andrea Flamini, Giada Sciarretta, Mario Scuro, Amir Sharif, Alessandro Tomasi, Silvio Ranise
On Cryptographic Mechanisms for the Selective Disclosure of Verifiable Credentials. CoRR (2024)
Stefano Berlato, Silvio Cretti, Domenico Siracusa, Silvio Ranise
Multi-Objective Microservice Orchestration: Balancing Security and Performance in CCAM. ICIN (2024)
Andrea Flamini, Giada Sciarretta, Mario Scuro, Amir Sharif, Alessandro Tomasi, Silvio Ranise
On cryptographic mechanisms for the selective disclosure of verifiable credentials. J. Inf. Secur. Appl. 83 (2024)
Andrea Flamini, Silvio Ranise, Giada Sciarretta, Mario Scuro, Amir Sharif, Alessandro Tomasi
A First Appraisal of Cryptographic Mechanisms for the Selective Disclosure of Verifiable Credentials. SECRYPT (2023)
Majid Mollaeefar, Silvio Ranise
Identifying and quantifying trade-offs in multi-stakeholder risk evaluation with applications to the data protection impact assessment of the GDPR. Comput. Secur. 129 (2023)
Amir Sharif, Francesco Antonio Marino, Giada Sciarretta, Giuseppe De Marco, Roberto Carbone, Silvio Ranise
Cross-Domain Sharing of User Claims: A Design Proposal for OpenID Connect Attribute Authorities. ARES (2023)
Gianluca Sassetti, Amir Sharif, Giada Sciarretta, Roberto Carbone, Silvio Ranise
Assurance, Consent and Access Control for Privacy-Aware OIDC Deployments. DBSec (2023)
Zahra Ebadi Ansaroudi, Roberto Carbone, Giada Sciarretta, Silvio Ranise
Control is Nothing Without Trust a First Look into Digital Identity Wallet Trends. DBSec (2023)
Matteo Rizzi, Salvatore Manfredi, Giada Sciarretta, Silvio Ranise
Demo: TLSAssistant v2: A Modular and Extensible Framework for Securing TLS. SACMAT (2022)
Stefano Berlato, Marco Centenaro, Silvio Ranise
Smart Card-Based Identity Management Protocols for V2V and V2I Communications in CCAM: A Systematic Literature Review. IEEE Trans. Intell. Transp. Syst. 23 (8) (2022)
Majid Mollaeefar, Silvio Ranise
Identifying and Quantifying Trade-offs in Multi-Stakeholder Risk Evaluation with Applications to the Data Protection Impact Assessment of the GDPR. CoRR (2022)
Amir Sharif, Matteo Ranzi, Roberto Carbone, Giada Sciarretta, Silvio Ranise
SoK: A Survey on Technological Trends for (pre)Notified eIDAS Electronic Identity Schemes. ARES (2022)
Salvatore Manfredi, Mariano Ceccato, Giada Sciarretta, Silvio Ranise
Empirical Validation on the Usability of Security Reports for Patching TLS Misconfigurations: User- and Case-Studies on Actionable Mitigations. J. Wirel. Mob. Networks Ubiquitous Comput. Dependable Appl. 13 (1) (2022)
Stefano Berlato, Umberto Morelli, Roberto Carbone, Silvio Ranise
End-to-End Protection of IoT Communications Through Cryptographic Enforcement of Access Control Policies. DBSec (2022)
Tahir Ahmad, Umberto Morelli, Silvio Ranise
Distributed Enforcement of Access Control policies in Intelligent Transportation System (ITS) for Situation Awareness. ARES (2022)
Amir Sharif, Roberto Carbone, Giada Sciarretta, Silvio Ranise
Best current practices for OAuth/OIDC Native Apps: A study of their adoption in popular providers and top-ranked Android clients. J. Inf. Secur. Appl. 65 (2022)
Matteo Rizzi, Salvatore Manfredi, Giada Sciarretta, Silvio Ranise
A Modular and Extensible Framework for Securing TLS. CODASPY (2022)
Tahir Ahmad, Umberto Morelli, Silvio Ranise, Nicola Zannone
Extending access control in AWS IoT through event-driven functions: an experimental evaluation using a smart lock system. Int. J. Inf. Sec. 21 (2) (2022)
Stefano Berlato, Roberto Carbone, Adam J. Lee, Silvio Ranise
Formal Modelling and Automated Trade-off Analysis of Enforcement Architectures for Cryptographic Access Control in the Cloud. ACM Trans. Priv. Secur. 25 (1) (2022)
Marco Centenaro, Stefano Berlato, Roberto Carbone, Gianfranco Burzio, Giuseppe Faranda Cordella, Roberto Riggio, Silvio Ranise
Safety-Related Cooperative, Connected, and Automated Mobility Services: Interplay Between Functional and Security Requirements. IEEE Veh. Technol. Mag. 16 (4) (2021)
Carla Mascia, Silvio Ranise
Asset Sensitivity for Aligning Risk Assessment Across Multiple Units in Complex Organizations. FPS (2021)
Salimeh Dashti, Amir Sharif, Roberto Carbone, Silvio Ranise
Automated Risk Assessment and What-if Analysis of OpenID Connect and OAuth 2.0 Deployments. DBSec (2021)
Stefano Berlato, Roberto Carbone, Silvio Ranise
Cryptographic Enforcement of Access Control Policies in the Cloud: Implementation and Experimental Assessment. SECRYPT (2021)
Andrea Bisegna, Roberto Carbone, Silvio Ranise
Integrating a Pentesting Tool for IdM Protocols in a Continuous Delivery Pipeline. ETAA (2021)
Umberto Morelli, Ivan Vaccari, Silvio Ranise, Enrico Cambiaso
DoS Attacks in Available MQTT Implementations: Investigating the Impact on Brokers and Devices, and supported Anti-DoS Protections. ARES (2021)
Marco Pernpruner, Giada Sciarretta, Silvio Ranise
A Framework for Security and Risk Analysis of Enrollment Procedures: Application to Fully-remote Solutions based on eDocuments. SECRYPT (2021)
Matteo Leonelli, Umberto Morelli, Giada Sciarretta, Silvio Ranise
Secure Pull Printing with QR Codes and National eID Cards: A Software-oriented Design and an Open-source Implementation. CODASPY (2021)
Andreas Heider-Aviet, Danny Roswin Ollik, Stefano Berlato, Silvio Ranise, Roberto Carbone, Van Thanh Le, Nabil El Ioini, Claus Pahl, Hamid R. Barzegar
Blockchain Based RAN Data Sharing. SMDS (2021)
Biniam Fisseha Demissie, Silvio Ranise
Assessing the Effectiveness of the Shared Responsibility Model for Cloud Databases: the Case of Google's Firebase. SMDS (2021)
Salimeh Dashti, Anderson Santana de Oliveria, Caelin Kaplan, Manuel Dalcastagné, Silvio Ranise
Can Data Subject Perception of Privacy Risks Be Useful in a Data Protection Impact Assessment? SECRYPT (2021)
Salvatore Manfredi, Mariano Ceccato, Giada Sciarretta, Silvio Ranise
Do Security Reports Meet Usability?: Lessons Learned from Using Actionable Mitigations for Patching TLS Misconfigurations. ARES (2021)
Marco Pernpruner, Roberto Carbone, Silvio Ranise, Giada Sciarretta
The Good, the Bad and the (Not So) Ugly of Out-of-Band Authentication with eID Cards and Push Notifications: Design, Formal and Risk Analysis. CODASPY (2020)
Salvatore Manfredi, Silvio Ranise, Giada Sciarretta, Alessandro Tomasi
TLSAssistant Goes FINSEC A Security Platform Integration Extending Threat Intelligence Language. CPS4CIP (2020)
Moreno Ambrosin, Mauro Conti, Riccardo Lazzeretti, Md Masoom Rabbani, Silvio Ranise
Collective Remote Attestation at the Internet of Things Scale: State-of-the-Art and Future Challenges. IEEE Commun. Surv. Tutorials 22 (4) (2020)
Giada Sciarretta, Roberto Carbone, Silvio Ranise, Luca Viganò
Formal Analysis of Mobile Multi-Factor Authentication with Single Sign-On Login. ACM Trans. Priv. Secur. 23 (3) (2020)
Majid Mollaeefar, Alberto Siena, Silvio Ranise
Multi-Stakeholder Cybersecurity Risk Assessment for Data Protection. ICETE (2) (2020)
Sergii Kushch, Yurii Baryshev, Silvio Ranise
Blockchain Tree as Solution for Distributed Storage of Personal ID Data and Document Access Control. Sensors 20 (13) (2020)
Mauro Conti, Pallavi Kaliyar, Md Masoom Rabbani, Silvio Ranise
Attestation-enabled secure and scalable routing protocol for IoT networks. Ad Hoc Networks 98 (2020)
Amir Sharif, Roberto Carbone, Giada Sciarretta, Silvio Ranise
Automated and Secure Integration of the OpenID Connect iGov Profile in Mobile Native Applications. ETAA@ESORICS (2020)
Giovanni Abbiati, Silvio Ranise, Antonio Schizzerotto, Alberto Siena
Merging Datasets of CyberSecurity Incidents for Fun and Insight. Frontiers Big Data 3 (2020)
Sérgio Manuel Nóbrega Gonçalves, Alessandro Tomasi, Andrea Bisegna, Giulio Pellizzari, Silvio Ranise
Verifiable Contracting - A Use Case for Onboarding and Contract Offering in Financial Services with eIDAS and Verifiable Credentials. DETIPS/DeSECSys/MPS/SPOSE@ESORICS (2020)
Edlira Dushku, Md Masoom Rabbani, Mauro Conti, Luigi V. Mancini, Silvio Ranise
SARA: Secure Asynchronous Remote Attestation for IoT Systems. IEEE Trans. Inf. Forensics Secur. 15 (2020)
Stefano Berlato, Roberto Carbone, Adam J. Lee, Silvio Ranise
Exploring Architectures for Cryptographic Access Control Enforcement in the Cloud for Fun and Optimization. AsiaCCS (2020)
Marco Centenaro, Stefano Berlato, Roberto Carbone, Gianfranco Burzio, Giuseppe Faranda Cordella, Silvio Ranise, Roberto Riggio
Security Considerations on 5G-Enabled Back-Situation Awareness for CCAM. 5G World Forum (2020)
Andrea Bisegna, Roberto Carbone, Giulio Pellizzari, Silvio Ranise
Micro-Id-Gym: A Flexible Tool for Pentesting Identity Management Protocols in the Wild and in the Laboratory. ETAA@ESORICS (2020)
Tahir Ahmad, Umberto Morelli, Silvio Ranise
Deploying Access Control Enforcement for IoT in the Cloud-Edge Continuum with the help of the CAP Theorem. SACMAT (2020)
Giovanni Abbiati, Silvio Ranise, Antonio Schizzerotto, Alberto Siena
Learning from Others' Mistakes: An Analysis of Cyber-security Incidents. IoTBDS (2019)
Mauro Conti, Edlira Dushku, Luigi V. Mancini, Md Masoom Rabbani, Silvio Ranise
Remote Attestation as a Service for IoT. IoTSMS (2019)
Amir Sharif, Roberto Carbone, Silvio Ranise, Giada Sciarretta
A Wizard-based Approach for Secure Code Generation of Single Sign-On and Access Delegation Solutions for Mobile Native Apps. ICETE (2) (2019)
Umberto Morelli, Lorenzo Nicolodi, Silvio Ranise
An Open and Flexible CyberSecurity Training Laboratory in IT/OT Infrastructures. IOSec/MSTEC/FINSEC@ESORICS (2019)
Salvatore Manfredi, Silvio Ranise, Giada Sciarretta
Lost in TLS? No More! Assisted Deployment of Secure TLS Configurations. DBSec (2019)
Sergii Kushch, Yurii Baryshev, Silvio Ranise
Blockchain Tree as Solution for Distributed Storage of Personal ID Data and Document Access Control. CoRR (2019)
Salimeh Dashti, Silvio Ranise
A Tool-assisted Methodology for the Data Protection Impact Assessment. ICETE (2) (2019)
Umberto Morelli, Silvio Ranise, Damiano Sartori, Giada Sciarretta, Alessandro Tomasi
Audit-Based Access Control with a Distributed Ledger: Applications to Healthcare Organizations. STM (2019)
Federico Sinigaglia, Roberto Carbone, Gabriele Costa, Silvio Ranise
MuFASA: A Tool for High-level Specification and Analysis of Multi-factor Authentication Protocols. ETAA@ESORICS (2019)
Andrea Palmieri, Paolo Prem, Silvio Ranise, Umberto Morelli, Tahir Ahmad
MQTTSA: A Tool for Automatically Assisting the Secure Deployments of MQTT Brokers. SERVICES (2019)
Sergii Kushch, Silvio Ranise, Giada Sciarretta
Blockchain Tree for eHealth. CoRR (2019)
Silvio Ranise, Giada Sciarretta, Alessandro Tomasi
Enroll, and Authentication Will Follow - eID-Based Enrollment for a Customized, Secure, and Frictionless Authentication Experience. FPS (2019)
Salimeh Dashti, Silvio Ranise
Tool-Assisted Risk Analysis for Data Protection Impact Assessment. Privacy and Identity Management (2019)
Clara Bertolissi, Daniel Ricardo dos Santos, Silvio Ranise
Solving Multi-Objective Workflow Satisfiability Problems with Optimization Modulo Theories Techniques. SACMAT (2018)
Moreno Ambrosin, Mauro Conti, Riccardo Lazzeretti, Md Masoom Rabbani, Silvio Ranise
PADS: Practical Attestation for Highly Dynamic Swarm Topologies. SIoT (2018)
Roberto Carbone, Silvio Ranise, Giada Sciarretta
Design and Security Assessment of Usable Multi-factor Authentication and Single Sign-On Solutions for Mobile Applications - A Workshop Experience Report. Privacy and Identity Management (2018)
Tahir Ahmad, Umberto Morelli, Silvio Ranise, Nicola Zannone
A Lazy Approach to Access Control as a Service (ACaaS) for IoT: An AWS Case Study. SACMAT (2018)
Moreno Ambrosin, Mauro Conti, Riccardo Lazzeretti, Md Masoom Rabbani, Silvio Ranise
PADS: Practical Attestation for Highly Dynamic Swarm Topologies. CoRR (2018)
Tahir Ahmad, Silvio Ranise
Validating Requirements of Access Control for Cloud-Edge IoT Solutions (Short Paper). FPS (2018)
Mauro Conti, Pallavi Kaliyar, Md Masoom Rabbani, Silvio Ranise
SPLIT: A Secure and Scalable RPL routing protocol for Internet of Things. WiMob (2018)
Giada Sciarretta, Roberto Carbone, Silvio Ranise, Luca Viganò
Design, Formal Specification and Analysis of Multi-Factor Authentication Solutions with a Single Sign-On Experience. POST (2018)
Silvio Ranise, Anh Tuan Truong, Luca Viganò
Automated and efficient analysis of administrative temporal RBAC policies with role hierarchies. J. Comput. Secur. 26 (4) (2018)
Fatih Turkmen, Jerry den Hartog, Silvio Ranise, Nicola Zannone
Formal analysis of XACML policies using SMT. Comput. Secur. 66 (2017)
Daniel Ricardo dos Santos, Silvio Ranise
A Survey on Workflow Satisfiability, Resiliency, and Related Problems. CoRR (2017)
Silvio Ranise, Hari Siswantoro
Automated Legal Compliance Checking by Security Policy Analysis. SAFECOMP Workshops (2017)
Moreno Ambrosin, Mauro Conti, Riccardo Lazzeretti, Md Masoom Rabbani, Silvio Ranise
Toward secure and efficient attestation for highly dynamic swarms: poster. WISEC (2017)
Daniel Ricardo dos Santos, Silvio Ranise
On Run-Time Enforcement of Authorization Constraints in Security-Sensitive Workflows. SEFM (2017)
Daniel Ricardo dos Santos, Silvio Ranise, Luca Compagna, Serena Elisa Ponta
Automatically finding execution scenarios to deploy security-sensitive workflows. J. Comput. Secur. 25 (3) (2017)
Anh Truong, Silvio Ranise, Thanh Tung Nguyen
Scalable Automated Analysis of Access Control and Privacy Policies. Trans. Large Scale Data Knowl. Centered Syst. 36 (2017)
Paolo Guarda, Silvio Ranise, Hari Siswantoro
Security Analysis and Legal Compliance Checking for the Design of Privacy-friendly Information Systems. SACMAT (2017)
Giada Sciarretta, Roberto Carbone, Silvio Ranise, Alessandro Armando
Anatomy of the Facebook solution for mobile single sign-on: Security assessment and improvements. Comput. Secur. 71 (2017)
Umberto Morelli, Silvio Ranise
Assisted Authoring, Analysis and Enforcement of Access Control Policies in the Cloud. SEC (2017)
Luca Compagna, Daniel Ricardo dos Santos, Serena Elisa Ponta, Silvio Ranise
Aegis: Automatic Enforcement of Security Policies in Workflow-driven Web Applications. CODASPY (2017)
Anh Tuan Truong, Silvio Ranise
ASASPXL: New Clother for Analysing ARBAC Policies. FDSE (2016)
Konrad S. Wrona, Sander Oudkerk, Alessandro Armando, Silvio Ranise, Riccardo Traverso, Lisa Ferrari, Richard McEvoy
Assisted content-based labelling and classification of documents. ICMCIS (2016)
Giada Sciarretta, Alessandro Armando, Roberto Carbone, Silvio Ranise
Security of Mobile Single Sign-On: A Rational Reconstruction of Facebook Login Solution. SECRYPT (2016)
Daniel Ricardo dos Santos, Serena Elisa Ponta, Silvio Ranise
Modular Synthesis of Enforcement Mechanisms for the Workflow Satisfiability Problem: Scalability and Reusability. SACMAT (2016)
Alessandro Armando, Silvio Ranise, Riccardo Traverso, Konrad S. Wrona
SMT-based Enforcement and Analysis of NATO Content-based Protection and Release Policies. ABAC@CODASPY (2016)
Giada Sciarretta, Roberto Carbone, Silvio Ranise
A delegated authorization solution for smart-city mobile applications. RTSI (2016)
Luca Compagna, Daniel Ricardo dos Santos, Serena Elisa Ponta, Silvio Ranise
Cerberus: Automated Synthesis of Enforcement Mechanisms for Security-Sensitive Business Processes. TACAS (2016)
Silvio Ranise, Anh Tuan Truong, Riccardo Traverso
Parameterized model checking for security policy analysis. Int. J. Softw. Tools Technol. Transf. 18 (5) (2016)
Worachet Uttha, Clara Bertolissi, Silvio Ranise
Modeling Authorization Policies for Web Services in Presence of Transitive Dependencies. SECRYPT (2015)
Alessandro Armando, Silvio Ranise, Riccardo Traverso, Konrad S. Wrona
Compiling NATO authorization policies for enforcement in the cloud and SDNs. CNS (2015)
Fatih Turkmen, Jerry den Hartog, Silvio Ranise, Nicola Zannone
Analysis of XACML Policies with SMT. POST (2015)
Silvio Ranise, Anh Tuan Truong, Luca Viganò
Automated analysis of RBAC policies with temporal constraints and static role hierarchies. SAC (2015)
Alessandro Armando, Gianluca Bocci, Gabriele Costa, Rocco Mammoliti, Alessio Merlo, Silvio Ranise, Riccardo Traverso, Andrea Valenza
Mobile App Security Assessment with the MAVeriC Dynamic Analysis Module. MIST@CCS (2015)
Daniel Ricardo dos Santos, Silvio Ranise, Serena Elisa Ponta
Modularity for Security-Sensitive Workflows. CoRR (2015)
Alessandro Armando, Silvio Ranise, Riccardo Traverso, Konrad S. Wrona
A SMT-based Tool for the Analysis and Enforcement of NATO Content-based Protection and Release Policies. SACMAT (2015)
Clara Bertolissi, Daniel Ricardo dos Santos, Silvio Ranise
Automated Synthesis of Run-time Monitors to Enforce Authorization Policies in Business Processes. AsiaCCS (2015)
Riccardo De Masellis, Chiara Ghidini, Silvio Ranise
A Declarative Framework for Specifying and Enforcing Purpose-Aware Policies. STM (2015)
Riccardo De Masellis, Chiara Ghidini, Silvio Ranise
A Declarative Framework for Specifying and Enforcing Purpose-aware Policies. CoRR (2015)
Daniel Ricardo dos Santos, Silvio Ranise, Luca Compagna, Serena Elisa Ponta
Assisting the Deployment of Security-Sensitive Workflows by Finding Execution Scenarios. DBSec (2015)
Roberto Bruttomesso, Silvio Ghilardi, Silvio Ranise
Quantifier-free interpolation in combinations of equality interpolating theories. ACM Trans. Comput. Log. 15 (1) (2014)

Silvio Ranise.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Silvio Ranise